Please ask questions ONLY in this topic.

[fallensnow]

Hi!

I have the username and the password (not just the hash), but I can't log in to the admin page.
What am I doing wrong?

Thanks

If you have the right username and the password ... you should be able to log in.
I just figure it out, it works for me.

[Medic2149]

Hey guys,

This is my first time posting on here but I am having a hell of a time understanding JTR I got it to run and it said it cracked the hash but then I can't figure out how to see the uncrypted p/w. Feel free to PM me.

[fashizzlepop]

Have you read all the documentation on it at their website?

[brokenxlx]

Hello. I have completed the mission and cracked the hash using JTR. But I wanted to ask why the hell is this hash so messed up, why does it have so many dots and dollar signs. What kind of hash is that ?
If anyone could tell me it would be really appreciated. Thanks

[fashizzlepop]

How did you manage to crack this without knowing the type of hash? Hmmm?

[Goatboy]

How did you manage to crack this without knowing the type of hash? Hmmm?

He used JTR =\

[brokenxlx]

How did you manage to crack this without knowing the type of hash? Hmmm?

Yeah I used JTR (John the Ripper) by seeing the hints in all these posts.

Can anyone please enlighten me about the kind of hash ?

[fashizzlepop]

Wait, so JTR doesn't require delimiting what type of hash it is? It figures it out for you?

[brokenxlx]

Wait, so JTR doesn't require delimiting what type of hash it is? It figures it out for you?

Well I guess. I ran JTR with command prompt and the hash as an argument to the exe and it cracked it for me. I just learned this from the hints and that is why I am asking you how did that happen.

[MrZypher]

This directory traversal thing is infuriating. It really shouldn't be this difficult to track down a basic layout of an apache server.

Can someone who's already finished answer something for me?

Does the fact that trying to back up in directories results in the "you can't view that file" message, regardless of what else is in the url, mean that we can't back up any further?

Also, is there a fairly standard place that the .ht****** is going to be found? Because I've filtered through as many tutorials and reference sites as I could and seen different paths to the file on nearly every one of them. Of course none of them do me any good and just generate dozens more URLs to try!

I seriously can't find any explanation about what a standard apache directory structure would look like. I'm in the process of downloading this for myself just to see what it looks like before things get renamed, but if someone wiser has any insight into these things, I would really appreciate it. I've thrown hours worth of URLs at this thing and it's not getting me anywhere.

EDIT: I swear, I'm going to jump off my roof right now. I had the right place in the first five minutes, but I had a spelling error. As usual, the whole thing is about a million times less complicated than I imagine it must be. To those who had trouble where I did, there should be very little guessing as to the location of the file. You can track down the location based on what you can find within the website. Links to other websites posted so far are useful for understanding what you need to find, but not really where you need to find it. Don't do what I did and try to use them to figure out the file location, or you'll spend hours going no where. I don't think this is too spoilerific. I'm just trying to separate some ideas from one another and remove some misconceptions about the problem that I developed when I was reading this thread.